I don't have any great ways to verify and test. The logs are populating after making a rule like the top one here:
I ran out of free attempts on geopeeker. But free proxies that are supposedly located in the US, are still able to fetch the site. Which should not happen. I'll have to find out a way to test this better.
The above rule should ideally block everyone and anyone from seeing my domain. osur.ee
I'll leave this up for now, it's a lab environment. If you can get to it, then know that you're not blocked by that rule, which then implies that maxmind doesn't have my IP listed under EE. 22.214.171.124 (didn't explicitly confirm if it is under EE, but it should be, it's a static address and they don't move around much)
I did calculate a 4G IP earlier though and it matched the EE column in the IpToCountry.csv file (was tagged Aug 2012. Assuming the newer is good too but not confirmed). I tried testing that with a rule that was without the country network object inverted. Tried reaching my site over the phone, and that worked IIRC, but it was around 2 hours ago. It shouldn't have. Implies that the file is, not used??
I'm off to bed for tonight. Thank you for the replies. Will probably continue the investigation on my end tomorrow as we're currently interested with employing geoblocking at the office.
Even though it isn't perfect, seemingly, according to logs. it does report that it's blocking something and for starters that's probably good enough.
EDIT: After reverting the env variable on the management, installing the policies and rebooting the gateway, the in.geod process is still running on the gateway. Legacy view in the management disappeared.